CVE

Id
11844  
CVE No.
CVE-2005-0638  
Status
Candidate  
Description
xloadimage before 4.1-r2, and xli before 1.17, allows attackers to execute arbitrary commands via shell metacharacters in filenames for compressed images, which are not properly quoted when calling the gunzip command.  
Phase
Assigned (20050304)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
84938 11844 CVE-2005-0638 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-134_RHSA-2005-332.pdf  View
84939 11844 CVE-2005-0638 DEBIAN:DSA-695  View
84940 11844 CVE-2005-0638 URL:http://www.debian.org/security/2005/dsa-695  View
84941 11844 CVE-2005-0638 FEDORA:FLSA-2006:152923  View
84942 11844 CVE-2005-0638 URL:http://www.securityfocus.com/archive/1/archive/1/433935/30/5010/threaded  View
84943 11844 CVE-2005-0638 GENTOO:GLSA-200503-05  View
84944 11844 CVE-2005-0638 URL:http://security.gentoo.org/glsa/glsa-200503-05.xml  View
84945 11844 CVE-2005-0638 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=79762  View
84946 11844 CVE-2005-0638 REDHAT:RHSA-2005:332  View
84947 11844 CVE-2005-0638 URL:http://www.redhat.com/support/errata/RHSA-2005-332.html  View
84948 11844 CVE-2005-0638 BID:12712  View
84949 11844 CVE-2005-0638 URL:http://www.securityfocus.com/bid/12712  View
84950 11844 CVE-2005-0638 OSVDB:14365  View
84951 11844 CVE-2005-0638 URL:http://www.osvdb.org/14365  View
84952 11844 CVE-2005-0638 OVAL:oval:org.mitre.oval:def:10898  View
84953 11844 CVE-2005-0638 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10898  View
84954 11844 CVE-2005-0638 SECUNIA:14459  View
84955 11844 CVE-2005-0638 URL:http://secunia.com/advisories/14459  View
84956 11844 CVE-2005-0638 SECUNIA:14462  View

Related JVN